129 matches found
CVE-2018-19048
Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element...
EUVD-2019-0460
Malware in sbrugna...
EUVD-2009-2464
Malware in sbrugna...
EUVD-2017-15874
Malware in sbrugna...
EUVD-2018-0751
Malware in sbrugna...
EUVD-2020-0615
Malware in sbrugna...
EUVD-2011-2358
Malware in sbrugna...
EUVD-2010-1267
Malware in sbrugna...
EUVD-2018-11591
Malware in sbrugna...
EUVD-2019-0741
Malware in sbrugna...
EUVD-2011-2352
Malware in sbrugna...
EUVD-2022-32736
Malicious code in bioql PyPI...
EUVD-2022-5607
Malicious code in bioql PyPI...
EUVD-2022-5827
Malicious code in bioql PyPI...
EUVD-2022-2438
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2020-4054
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Sanitize RubyGem sanitize greater than or equal to 3.0.0 and less than 5.2.1, there is a cross-site scripting vulnerability. When HTML is sanitized using...
CVE-2025-2336 AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'
Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...
CVE-2025-2336 AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'
Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing and...
CVE-2022-28284
SVG's element could have been used to load unexpected content that could have executed script in certain circumstances. While the specification seems to allow this, other browsers do not, and web developers relied on this property for script security so gecko's implementation was aligned with...
CVE-2020-15562
An issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before 1.4.7. It allows XSS via a crafted HTML e-mail message, as demonstrated by a JavaScript payload in the xmlns aka XML namespace attribute of a HEAD element when an SVG element exists...